Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
File: cFUm-asN0naCP8Hw66od5jt9ZWw.cer (raw, json)
Hash identifier: 1kaG7ws6tIBaiWnTHLLYun0SPChH/CZ76QFIQ8Kl66I=
Subject key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01900CF952F482C667A4A4B5B2475874A867
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 12 Jun 2024 15:03:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210129
IP: 185.94.132.0/22
IP: 185.227.120.0/22
IP: 2a0d:52c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0c:f9:52:f4:82:c6:67:a4:a4:b5:b2:47:58:74:a8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 12 15:03:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d7:93:f5:5a:21:76:9d:f0:bf:7d:d4:b8:86:
f3:9f:6f:8d:09:94:a0:8e:8b:61:60:b2:52:00:ec:
12:ae:e6:6f:2a:3a:88:61:cd:42:65:f3:f0:4c:fd:
35:c5:91:68:f4:57:1e:34:77:a1:7f:6d:7b:53:3d:
97:9b:c4:16:5a:c9:40:d3:cb:ca:a8:56:ae:02:11:
73:40:11:2e:2f:fb:0f:3b:03:16:06:e3:77:4b:dc:
a4:49:82:11:bc:95:b9:3a:74:f4:e6:01:b1:4d:09:
2b:c1:31:8e:06:a7:cd:62:78:7f:97:a0:c4:40:bc:
1a:65:2e:f1:37:84:9f:bf:d6:24:b6:83:af:6d:03:
4d:54:86:99:a9:38:e7:ab:63:ae:2a:40:35:5c:5a:
47:75:15:dd:0d:1a:c9:94:f7:09:e3:be:38:a1:e3:
cb:0d:fc:12:f7:92:2e:ab:12:74:93:25:2d:95:18:
55:51:34:57:77:4d:35:05:03:c6:0b:36:59:35:50:
fc:9d:57:ae:0e:d4:1b:39:ed:96:9e:6a:f8:e8:54:
18:06:9e:84:30:fc:c2:17:44:60:f2:22:46:dc:03:
99:b7:31:66:fc:a4:3e:f3:4b:a6:d7:05:0e:a3:89:
19:ac:1d:08:7c:22:0b:45:7e:5c:a7:bc:f3:ec:66:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.132.0/22
185.227.120.0/22
IPv6:
2a0d:52c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210129
Signature Algorithm: sha256WithRSAEncryption
b0:f3:25:54:65:6e:fc:2f:4d:bf:1c:52:7e:10:0a:e5:3c:d6:
49:38:6e:b7:5d:d5:99:f7:24:d8:f2:14:74:fc:48:af:de:f1:
40:44:dd:ab:6e:8f:bb:55:27:98:12:8c:b1:ba:24:76:31:f5:
39:fe:54:f0:fb:a0:e8:50:4b:7b:ff:26:51:b3:cd:f1:05:03:
47:5d:f3:63:36:e4:b5:fd:72:fd:a2:37:10:8e:da:ff:6a:c3:
3a:95:5d:0a:5d:8c:91:26:d4:d0:8a:57:b6:da:5e:78:e9:56:
c5:d0:2f:34:52:e2:1f:d3:4e:aa:e2:36:32:86:fc:f1:c2:de:
51:66:82:a6:bc:4b:69:33:bd:c0:41:80:c4:1d:21:45:b4:26:
8d:ac:1c:5e:64:e2:38:1f:7f:6d:fc:0f:24:29:32:91:38:66:
ca:0c:2a:9b:9c:cd:5d:dc:d6:00:9f:c4:f6:63:45:67:bb:20:
e8:37:c7:fe:0f:4c:1c:39:87:fa:62:77:d8:fb:83:80:e4:1a:
84:aa:3f:8d:40:f0:ca:9f:84:d8:85:0e:f5:29:64:82:73:84:
bd:c7:19:06:17:d9:2d:5d:5d:d3:ed:fc:46:db:10:f0:d5:9f:
93:83:b7:c9:0c:42:d2:5e:b3:e0:dc:f2:06:9e:27:f7:c9:72:
30:98:c6:08
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZAM+VL0gsZnpKS1skdYdKhnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNjEyMTUwMzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDU1MjZmOWFiMGRkMjc2ODIzZmMxZjBlYmFhMWRlNjNiN2Q2NTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69eT9Vohdp3wv33UuIbzn2+NCZSg
jothYLJSAOwSruZvKjqIYc1CZfPwTP01xZFo9FceNHehf217Uz2Xm8QWWslA08vK
qFauAhFzQBEuL/sPOwMWBuN3S9ykSYIRvJW5OnT05gGxTQkrwTGOBqfNYnh/l6DE
QLwaZS7xN4Sfv9YktoOvbQNNVIaZqTjnq2OuKkA1XFpHdRXdDRrJlPcJ4744oePL
DfwS95IuqxJ0kyUtlRhVUTRXd001BQPGCzZZNVD8nVeuDtQbOe2Wnmr46FQYBp6E
MPzCF0Rg8iJG3AOZtzFm/KQ+80um1wUOo4kZrB0IfCILRX5cp7zz7GZEFwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFHBVJvmrDdJ2gj/B8OuqHeY7fWVsMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyL2ZlNzFi
Ni02YWFhLTRiZDQtODY2MS02OTk4YWI3ZWRmN2EvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvZmU3MWI2
LTZhYWEtNGJkNC04NjYxLTY5OThhYjdlZGY3YS8xL2NGVW0tYXNOMG5hQ1A4SHc2
Nm9kNWp0OVpXdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCuV6EAwQCueN4MA0EAgACMAcDBQMqDVLAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM00TANBgkqhkiG9w0BAQsFAAOCAQEAsPMl
VGVu/C9NvxxSfhAK5TzWSThut13Vmfck2PIUdPxIr97xQETdq26Pu1UnmBKMsbok
djH1Of5U8Pug6FBLe/8mUbPN8QUDR13zYzbktf1y/aI3EI7a/2rDOpVdCl2MkSbU
0IpXttpeeOlWxdAvNFLiH9NOquI2Mob88cLeUWaCprxLaTO9wEGAxB0hRbQmjawc
XmTiOB9/bfwPJCkykThmygwqm5zNXdzWAJ/E9mNFZ7sg6DfH/g9MHDmH+mJ32PuD
gOQahKo/jUDwyp+E2IUO9SlkgnOEvccZBhfZLV1d0+38RtsQ8NWfk4O3yQxC0l6z
4NzyBp4n98lyMJjGCA==
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:35:30 2024 by rpki-client on console-ams.rpki-client.org